![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: 5D/cY8nzF7cMlSu6Y+UFSBykXJDpTdRFtk+aD40dEz0=
Subject key identifier: 1C:16:9B:AD:5F:5F:91:84:57:FA:32:D6:CA:59:64:9C:A9:3A:CE:B4
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0190448BEE4DAB3B816F165828AF5EB6917E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 11D6
Signing time: Sun 23 Jun 2024 10:02:19 +0000
Manifest this update: Sun 23 Jun 2024 10:02:19 +0000
Manifest next update: Mon 24 Jun 2024 10:02:19 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: rsZ4S/9g8OvpjIFbKPKVTqIcrSCrt6xEYyviA8EgPdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:ee:4d:ab:3b:81:6f:16:58:28:af:5e:b6:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Jun 23 10:02:19 2024 GMT
Not After : Jun 24 10:02:19 2024 GMT
Subject: CN=1c169bad5f5f918457fa32d6ca59649ca93aceb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:0c:ff:cb:72:c2:27:7f:d7:ab:31:9b:6d:
dc:e2:51:3f:95:14:2b:43:43:d4:26:0a:fd:87:93:
55:68:2e:3a:3c:e0:74:7e:74:6d:bd:80:f1:0c:a3:
13:ef:33:00:2e:7c:9e:37:4e:47:66:6f:76:d2:bc:
e5:22:2a:08:a8:98:f5:17:4a:26:fe:eb:4b:6d:41:
9d:3f:57:9b:f5:de:e4:43:6e:fe:8a:61:51:1f:cb:
f4:25:2e:95:d3:33:b1:ba:a3:cb:f4:41:fa:b3:72:
7e:01:4d:ae:16:68:8e:00:e3:5a:7b:5b:d2:40:30:
83:5f:f2:18:29:36:4d:82:a9:4b:86:f8:dc:a1:ad:
48:05:4c:5c:23:dc:71:26:aa:c8:01:04:cd:29:b7:
b7:b5:18:5c:95:01:9f:bd:37:7d:fc:54:e0:e8:01:
3d:e3:4d:97:49:b9:37:6e:ff:b6:12:2e:d0:6c:b8:
f5:60:0b:9c:ec:9a:25:be:bb:7c:70:ce:3e:8b:ad:
32:ac:15:fa:e3:36:fa:25:1f:9d:bc:15:63:9c:84:
9a:0b:76:c4:f0:0a:52:94:ae:9f:2d:5b:ce:5a:3a:
45:b1:ec:cc:bd:ee:6d:b7:c9:f6:4d:2a:94:e9:c6:
25:f9:82:f6:31:28:a9:d2:71:5f:84:65:4d:b1:3d:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:9B:AD:5F:5F:91:84:57:FA:32:D6:CA:59:64:9C:A9:3A:CE:B4
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b2:a0:97:9a:28:0f:a2:63:ba:20:91:8a:3e:fe:34:7b:16:
0e:ba:29:ae:c4:fb:e3:b3:70:1a:4f:df:bf:ee:42:f2:cc:45:
69:88:32:f0:cf:08:f1:4d:a6:58:56:a7:74:be:20:04:f7:bc:
bc:70:28:cb:f2:1b:1b:36:fd:c8:a8:55:f5:7a:17:7c:c1:2a:
da:d6:35:d9:75:71:09:2b:77:f4:98:26:34:1f:32:43:3f:f6:
8d:89:1a:dd:43:ec:1c:85:89:ac:a8:20:62:83:de:fe:0a:22:
58:3f:79:c9:8c:21:51:a2:fd:be:47:3c:e2:3b:16:8c:e2:4c:
33:cf:bd:ac:c8:56:9b:43:53:f7:60:73:f4:d4:9c:77:2a:6a:
03:8f:58:49:55:c3:21:ec:10:fb:21:cd:b5:1b:72:c9:47:1c:
19:71:de:f2:ef:7e:85:68:b6:98:38:76:2a:54:aa:44:96:8d:
89:2c:35:19:26:5d:51:b8:af:e2:01:48:18:14:eb:e7:26:f2:
d2:39:69:24:ad:97:10:c0:2d:d8:84:17:51:ae:ad:c5:0a:08:
af:10:be:35:44:57:06:01:c4:71:ec:c8:15:e4:e8:a0:e3:d3:
96:41:9a:ec:e2:2b:4a:0e:ce:ae:46:b3:0f:27:99:bb:1f:9e:
27:3d:66:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi+5NqzuBbxZYKK9etpF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjQwNjIzMTAwMjE5WhcNMjQwNjI0MTAwMjE5WjAzMTEwLwYDVQQD
EygxYzE2OWJhZDVmNWY5MTg0NTdmYTMyZDZjYTU5NjQ5Y2E5M2FjZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzoM/8tywid/16sxm23c4lE/lRQr
Q0PUJgr9h5NVaC46POB0fnRtvYDxDKMT7zMALnyeN05HZm920rzlIioIqJj1F0om
/utLbUGdP1eb9d7kQ27+imFRH8v0JS6V0zOxuqPL9EH6s3J+AU2uFmiOAONae1vS
QDCDX/IYKTZNgqlLhvjcoa1IBUxcI9xxJqrIAQTNKbe3tRhclQGfvTd9/FTg6AE9
402XSbk3bv+2Ei7QbLj1YAuc7Jolvrt8cM4+i60yrBX64zb6JR+dvBVjnISaC3bE
8ApSlK6fLVvOWjpFsezMve5tt8n2TSqU6cYl+YL2MSip0nFfhGVNsT1r2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwWm61fX5GEV/oy1spZZJypOs60MB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLKgl5oo
D6JjuiCRij7+NHsWDroprsT747NwGk/fv+5C8sxFaYgy8M8I8U2mWFandL4gBPe8
vHAoy/IbGzb9yKhV9XoXfMEq2tY12XVxCSt39JgmNB8yQz/2jYka3UPsHIWJrKgg
YoPe/goiWD95yYwhUaL9vkc84jsWjOJMM8+9rMhWm0NT92Bz9NScdypqA49YSVXD
IewQ+yHNtRtyyUccGXHe8u9+hWi2mDh2KlSqRJaNiSw1GSZdUbiv4gFIGBTr5yby
0jlpJK2XEMAt2IQXUa6txQoIrxC+NURXBgHEcezIFeTooOPTlkGa7OIrSg7Orkaz
DyeZux+eJz1mJw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:02 2024 by rpki-client on console-ams.rpki-client.org